A-07 · assurance & limits · public instance

What is real, what is a demo,
and what mobile money prevents us from seeing.

This page is the counterpart of the French A-07 page. It states the status of each module, the meaning of the score, and the one limit that no on-chain graph can remove: the link between a wallet and a person or a mobile-money account is not in the blockchain.

instance: public, no account data: dated index + live Bitcoin decision: human review only French detail: A-07 FR

1 · Status matrix — no “operational” badge without proof

A feature is marked live only if it runs in this public instance without a private key. Everything else is labelled demo, optional or not done.

ModuleWhat it doesStatusLimit
A-01 Flow tracerReads a public address and its movements; scenario for other chains.liveNo identity, no ownership.
A-02 Sanctions screeningExact, variant and fuzzy name matching, with an explicit variant table.liveA match is an alert, never proof.
A-03 Fiat–crypto engineComputes taxable base, rate and estimated tax from editable inputs.liveNot tax advice; hypotheses are displayed.
A-04 Sanctions BIAggregates the dated index by source, country and asset.liveOne snapshot, no time series.
A-05 Screening consoleOffline search over the index, CSV/JSON export.liveInterface currently in French.
A-06 Sources & monitoringDaily export, checksum, version comparison, optional webhook.liveyente not deployed; one snapshot kept.
A-07 AssuranceThis page: status, score formula, limits.liveManual review remains mandatory.
A-08 Multi-hop & convergenceLive Bitcoin graph, 1–3 hops, additive score, A-08 convergence patterns.liveBitcoin only; capped graph; no identity.
LLM summaryOptional OpenAI-compatible connector, configured in the browser.optionalNever decision-making; no key provided.
Mobile-money identityLink a wallet to a SIM or a subscriber.not doneRequires authorised VASP/telco data, offline, human review.

2 · Tracer and fiat engine — the right word

What the tracer establishes

Public movements between addresses, at a given depth, with the source and the build date. It shows co-movement, not common ownership.

Open A-01 · Open A-08 EN

What the fiat engine computes

A taxable base, a rate and an estimated tax from inputs you can edit. Every hypothesis is displayed; no figure is hard-coded into a report.

Open A-03

“Exposure” is not “ownership”. A graph can show that funds passed through an address; it cannot show who controlled that address.

3 · Mobile money — why the graph stops at the cash-out

What is visible

  • On-chain movements up to an exchange or a cash-out point.
  • Published sanctions addresses, by exact match.
  • Timing, amounts and counterparties, within the caps.

What is not visible

  • Which subscriber owns the mobile-money account.
  • Whether several SIM cards are controlled by one person.
  • The country of the beneficiary.
Honest wording: “converging addresses”, not “20 SIM cards → one wallet”. The second sentence requires authorised VASP/telco data, processed offline, with salted hashes and human review. It is not a blockchain deduction.

4 · Risk score — an addition, not a black box

The A-08 graph score is additive and capped at 100. Each line has a rule, a measure and a proof. The A-08 convergence layer adds C1…C7 with its own per-point proof.

score = min(100, Σ points) C1 fan-in ............ 25 max (log) C2 fan-out ........... 15 max (log) C3 transit ........... 10 C4 splitting ......... 15 C5 10-minute burst ... 10 C6 sanctions ≤2 hops . 25 C7 low coverage ...... cap 40 (or 30), 0 point

What the score means

An intensity of patterns. A high score is an investigation priority; it is not a probability of guilt.

What confidence means

The quality of the data behind the score: coverage, timestamps, exact sanctions matches. A score of 25 with low confidence is not a score of 25 with high confidence.

The full specification is in docs/A08_convergence.md; the engine is tested by _vpsdata/_test_convergence.js (34/34 pass).

5 · LLM summary — optional, never decision-making

Default: deterministic summary

A-08 builds a summary from nodes, edges and score components. It is reproducible, readable and depends on no external service.

Open the A-08 EN summary

If, and only if, you configure an LLM

  • Endpoint, model and key stay in your browser (localStorage).
  • No key is provided by the site; no call is made without your action.
  • The prompt contains only public graph data; no personal data is added.
  • LLM output is labelled and never replaces the scoring rules.
An LLM may summarise, rephrase or draw attention. It must not invent an address, an identity, a probability or a legal conclusion. Every generated sentence remains a hypothesis to verify.

6 · Monitoring and OpenSanctions — what is industrialised

Public daily pipeline

Every day at 04:15 UTC, a script downloads the five exports, verifies the checksum, rebuilds the index and compares versions. The log contains only counters and versions.

Open A-06 EN · A-06 FR

Why not yente now

A self-hosted yente server needs Elasticsearch/OpenSearch (4–16 GB RAM, 10–30 GB disk) and a delivery token. Public exports provide the same material for five lists without that load.

The YENTE_URL connector is planned: if a yente instance is deployed, its status appears in A-06 without changing the rest.

7 · What to retain

The house rule: a dated and hashed index, an additive score, a labelled demo, an optional alert, and never a synthetic graph presented as on-chain.

Last review: 20 October 2026. A-08 is the only module that queries a blockchain live, and only Bitcoin via Blockstream. A-05 and A-06 are currently French-language consoles; their English pages are summaries, not translated consoles.